Hi
If its a simple IP VPN built over internet cloud then you need either a router or firewall to have the vpn end points created on it.
If you are thinking off MPLS VPN then it depends on the kinda VPN service which you are availing from the SP.
Some flavor of MPLS L2 VPN services have the prequistie of using router as CPE at the customer end..
regds